Protection of Channel-Binding Information

Support for channel bindings varies by mechanism. Both the Diffie-Hellman
mechanism and the Kerberos v5 mechanism support channel bindings.

Developers should assume that channel bindings data do not have confidentiality
protection. Although the Kerberos v5 mechanism provides this protection, confidentiality
for channel-bindings data is not available with the Diffie-Hellman mechanism.